Debian Patches

Status for netty/1:4.1.48-4+deb11u2

Patch Description Author Forwarded Bugs Origin Last update
01-ignore-npn.patch Disable the NPN/ALPN support since it relies on jetty npn-api and alpn-api which aren't available in Debian Emmanuel Bourg <ebourg@apache.org> not-needed
03-ignore-jboss-marshalling.patch Disable the JBoss Marshalling support (not in Debian) Emmanuel Bourg <ebourg@apache.org> not-needed
04-netty-all-light.patch Turn the netty-all jar into an empty jar to optimize the size of the package but keep the dependencies on the other artifacts Emmanuel Bourg <ebourg@apache.org> not-needed
05-reproducible-versions-properties.patch Make the versions.properties files reproducible Emmanuel Bourg <ebourg@apache.org> not-needed
06-remove-tcnative-classifier.patch Removes the empty classifier for the tcnative dependency since it breaks the Gradle dependencies resolution (seen with the projectreactor package) Emmanuel Bourg <ebourg@apache.org> not-needed
07-netty-all-epoll-dependency.patch Moves the netty-transport-native-epoll out of the profiles since it doesn't work with Gradle (required for the projectreactor package) Emmanuel Bourg <ebourg@apache.org> not-needed
08-codegen-without-groovy-plugin.patch Adapts codegen.groovy to run without the groovy-maven-plugin (not in Debian yet) Emmanuel Bourg <ebourg@apache.org> not-needed
09-ignore-lz4.patch Disables lz4 support (missing dependency) Emmanuel Bourg <ebourg@apache.org> not-needed
10-ignore-lzma.patch Disables lzma support (missing dependency) Emmanuel Bourg <ebourg@apache.org> not-needed
11-ignore-protobuf-nano.patch Disables protobuf nano support (missing dependency) Emmanuel Bourg <ebourg@apache.org> not-needed
13-ignore-conscrypt.patch Disables Conscrypt support (missing dependency) Emmanuel Bourg <ebourg@apache.org> not-needed
15-disable-Werror.patch Build native parts without Werror as that can cause build failures Sjoerd Simons <sjoerd.simons@collabora.co.uk> no debian
16-disable-substratevm-support.patch Disables SubstrateVM support (missing dependencies) Emmanuel Bourg <ebourg@apache.org> not-needed
17-disable-blockhound-integration.patch Disables BlocHound integration (missing dependency) Emmanuel Bourg <ebourg@apache.org> not-needed
CVE-2021-21290.patch CVE-2021-21290 Markus Koschany <apo@debian.org> no https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec 2021-02-12
CVE-2021-21295.patch CVE-2021-21295 Markus Koschany <apo@debian.org> no https://github.com/netty/netty/commit/89c241e3b1795ff257af4ad6eadc616cb2fb3dc4 2021-03-26
CVE-2021-21409.patch CVE-2021-21409 (was: [PATCH] Merge pull request from GHSA-f256-j965-7f32)
Motivation:

We also need to ensure that all the header validation is done when a single header with the endStream flag is received

Modifications:

- Adjust code to always enforce the validation
- Add more unit tests

Result:

Always correctly validate
Norman Maurer <norman_maurer@apple.com> no https://github.com/netty/netty/commit/b0fa4d5aab4215f3c22ce6123dd8dd5f38dc0432 2021-03-30
CVE-2021-37136.patch CVE-2021-37136 Markus Koschany <apo@debian.org> no debian https://github.com/netty/netty/commit/41d3d61a61608f2223bb364955ab2045dd5e4020 2023-01-01
CVE-2021-37137.patch CVE-2021-37137 Markus Koschany <apo@debian.org> no debian https://github.com/netty/netty/commit/6da4956b31023ae967451e1d94ff51a746a9194f 2023-01-01
CVE-2021-43797.patch CVE-2021-43797 Markus Koschany <apo@debian.org> no debian https://github.com/netty/netty/commit/07aa6b5938a8b6ed7a6586e066400e2643897323 2023-01-01
CVE-2022-41881.patch CVE-2022-41881 Markus Koschany <apo@debian.org> no debian https://github.com/netty/netty/commit/cd91cf3c99123bd1e53fd6a1de0e3d1922f05bb2 2023-01-01
CVE-2022-41915.patch CVE-2022-41915 Markus Koschany <apo@debian.org> no debian https://github.com/netty/netty/commit/fe18adff1c2b333acb135ab779a3b9ba3295a1c4 2023-01-01
CVE-2023-34462.patch CVE-2023-34462 Markus Koschany <apo@debian.org> no debian https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32 2023-11-05
CVE-2023-44487.patch CVE-2023-44487 Markus Koschany <apo@debian.org> no debian https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61 2023-11-05
21-java-17.patch compile with JDK 17 no debian

All known versions for source package 'netty'

Links